Data Processing Agreement

    Last updated: April 10, 2026

    1. Scope

    This Data Processing Agreement ("DPA") applies to the processing of personal data by Tech Stack Digital Solutions on behalf of clients in connection with our digital marketing services.

    2. Definitions

    "Data Controller" refers to the client who determines the purposes and means of processing personal data. "Data Processor" refers to Tech Stack Digital Solutions, which processes data on behalf of the controller.

    3. Data Processing Activities

    We process personal data solely for the purpose of delivering contracted marketing services, including but not limited to: managing email lists, running ad campaigns, analyzing website traffic, and managing customer review data.

    4. Security Measures

    We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

    5. Sub-Processors

    We may engage sub-processors (e.g., email platforms, analytics tools) to assist in data processing. We maintain agreements with sub-processors to ensure equivalent data protection. Clients will be informed of any new sub-processors.

    6. Data Subject Rights

    We will assist clients in fulfilling data subject requests (access, deletion, portability) in a timely manner.

    7. Data Return & Deletion

    Upon termination of services, we will return or delete all client personal data within 30 days, unless retention is required by law.

    8. Contact

    For DPA inquiries:
    Tech Stack Digital Solutions
    Phone: 515-855-6499